The scheme relies on ‘typosquatting,' a tactic where scammers register domain names that look almost identical to real ones.